a9239d875ecd1dbf4d83e1112c07c49b99b2594262b6a57e0eaa0518390d5ffb

Sharing

Copy URL

Twitter E-mail

General

Target

a9239d875ecd1dbf4d83e1112c07c49b99b2594262b6a57e0eaa0518390d5ffb
Size

68KB
MD5

ac6ea1e500de772341a2075a7d916d63
SHA1

5babfdb4b6bbb06c729e558c55ad66677086daf8
SHA256

a9239d875ecd1dbf4d83e1112c07c49b99b2594262b6a57e0eaa0518390d5ffb
SHA512

bea010d6345c58f8fbe734f80ee1cd9c0a76faf0b50a3d5b0dfcaa653a29ad5da74822318c010d43f85e128e5689203794faa04eb5cbb53988a4dd6d09012cd2
SSDEEP

768:2O1ad9AI3Vllhv0HFaLDtsAPmSV984RJ7bXtB1dpOVTa3u0mYJAV/kDqkL:JaDAMlhUF6xmSV98A7/QTaezyCsDqkL

Score

N/A

Malware Config

Signatures

Files

a9239d875ecd1dbf4d83e1112c07c49b99b2594262b6a57e0eaa0518390d5ffb
.exe windows x86

a9b070a0992ab6a449ed3747a8ad0e7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange

rpcrt4

RpcObjectSetInqFn
RpcNetworkIsProtseqValidA
NdrNonEncapsulatedUnionFree
RpcMgmtInqStats
NdrComplexArrayFree
RpcBindingInqAuthClientW
NdrConformantVaryingStructBufferSize
I_RpcServerUseProtseq2W
RpcSmDestroyClientContext
RpcNetworkIsProtseqValidW
NdrConformantStructMarshall
NdrXmitOrRepAsBufferSize
NdrRpcSsDefaultFree
I_RpcRequestMutex
NdrClientInitializeNew
NdrEncapsulatedUnionBufferSize
RpcMgmtSetServerStackSize
NdrCorrelationInitialize
NdrUserMarshalFree
RpcBindingFree
RpcMgmtInqComTimeout
NdrComplexArrayBufferSize
NdrServerInitializeUnmarshall
NdrUserMarshalMarshall
NdrServerUnmarshall
RpcServerYield
I_RpcNsInterfaceExported
I_RpcServerUseProtseqEp2A
RpcServerInqDefaultPrincNameA
RpcStringBindingComposeW
RpcMgmtStopServerListening
RpcServerRegisterAuthInfoW
NdrNonEncapsulatedUnionBufferSize

imm32

ImmGetContext
ImmEscapeW
ImmGetGuideLineW
ImmSetStatusWindowPos
ImmUnregisterWordW
ImmReleaseContext
ImmGetGuideLineA
ImmSetCompositionFontA
ImmGetDefaultIMEWnd
ImmGetIMEFileNameA
ImmSetCompositionStringW
ImmUnregisterWordA
ImmSimulateHotKey
ImmInstallIMEW
ImmGetCompositionStringW
ImmGetConversionListA
ImmGetOpenStatus
ImmSetConversionStatus
ImmEnumInputContext

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9b070a0992ab6a449ed3747a8ad0e7e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

rpcrt4

imm32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB